aigdprinformation securitygrcnistiso 27001internal auditsoc 2lgpdthird party risk management
88
Крутая вакансия
развернуть
Очень крепкая возможность в продуктовой IoT-компании с четко определенной ролью и отличным пакетом бонусов, хотя вопрос зарплаты придется уточнять на собеседовании.
Кликните для подробной информации
Зарплата не указанаСовременный GRC-стекТрендовый доменОтличные бонусыПонятный scope
Оценка от Hirify AI
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior GRC Analyst (Security Assurance) (Information Security and Compliance): Building and improving governance, risk, and compliance programs for an IoT-enabled industrial technology platform with an accent on ISMS management, security controls, audits, and third-party risk. Focus on aligning practices with ISO 27001/27002, SOC 2, NIST, LGPD, and GDPR while driving remediation, audit readiness, and secure development improvements.
Compensation: Competitive salary and stock options; R$1,035/month meal allowance.
Company
hirify.global develops integrated industrial hardware and software that helps frontline maintenance workers improve operational efficiency.
What you will do
Maintain and improve the Information Security Management System in alignment with ISO 27001/27002, SOC 2, and NIST frameworks.
Perform compliance assessments, control reviews, gap analyses, and remediation tracking.
Develop and maintain information security policies, standards, procedures, and governance documentation.
Coordinate internal and external audit evidence, documentation, auditor requests, and continuous audit readiness.
Support secure development, Privacy by Design, and Privacy by Default practices across Engineering and Product.
Manage third-party security assessments, customer due diligence questionnaires, controls, evidence, and compliance records.
Requirements
Background in IT, information security, GRC, internal audit, compliance, or quality management.
Experience supporting ISMS programs and assessing ISO 27001/27002, SOC 2, and NIST compliance.
Knowledge of data protection requirements under LGPD and GDPR.
Experience with internal audits, control reviews, gap analyses, remediation tracking, and security policies.
Experience with third-party risk management, vendor assessments, and security control validation.
Advanced English proficiency required. Cross-functional experience with Engineering, IT, Security, Procurement, Legal, and business teams is expected.
Nice to have
Experience with compliance automation and GRC platforms such as Vanta or Drata.
Experience working with multiple security frameworks and regulatory environments.
Experience using Jira, Linear, Monday, or similar platforms for remediation and compliance initiatives.
Recognized security certifications.
Experience using automation and AI to improve GRC processes, evidence collection, reporting, and compliance operations.
Culture & Benefits
Competitive salary and stock options.
30 days of paid annual leave.
Education and courses stipend.
Health plan with national coverage and no coparticipation, plus dental insurance.
Wellhub and sports incentive, including an additional R$300 per month for eligible activities.
Opportunity to earn a trip anywhere in the world every four years.